Request to Enable Service Access in Syria

Get Help
1

Dear Auth0 / Okta Trade Compliance and Support Team,

I am writing to formally request that Okta remove Syria from the IP Access Policy’s automatic blocking restrictions on the Auth0 Platform, as described in your published article “Okta IP Access Policy” ( Okta Support Center (Lightning) ).

The article states that these restrictions exist “to comply with U.S. export control and economic sanctions laws,” and cites the U.S. Treasury OFAC sanctions programs and country information page ( Sanctions Programs and Country Information | Office of Foreign Assets Control ) as part of the basis for this policy. I have reviewed that page directly, and it no longer lists a comprehensive Syria sanctions program.

This reflects the following:

  1. On June 30, 2025, President Trump issued Executive Order 14312, “Providing for the Revocation of Syria Sanctions,” effective July 1, 2025, which revoked the executive orders forming the legal foundation of the Syria sanctions program and terminated the national emergency underlying them.
  2. As a direct result, OFAC formally removed the Syrian Sanctions Regulations (31 CFR Part 542) from the Code of Federal Regulations, effective August 26, 2025.
  3. On July, 2026, the U.S. government formally began the process of rescinding Syria’s State Sponsor of Terrorism designation — a further, independent step in unwinding the restrictions historically associated with Syria.

In short, the sanctions-program basis your article relies on for blocking Syria specifically no longer applies, and maintaining a blanket edge block on Syrian IP addresses creates an unnecessary barrier that is no longer required by U.S. trade compliance laws.

I understand from your own published FAQ that Okta is aware sanctions on Syria have been lifted, but has chosen, as an internal policy decision rather than a legal requirement, to keep the automatic IP block in place pending case-by-case exemption requests. I’d like to formally flag that the article’s stated rationale – reliance on the two linked government resources – is no longer accurate, since those resources no longer list Syria as sanctioned.

Thank you for your attention to this matter.

3

Hi @AbdSattout

Welcome to the Auth0 Community!

I understand that you want to bring into discussion that Auth0’s internal policy to retain the block over Syrian IP Addresses no longer reflect any official U.S. Sanctions that are in place at this moment.

We appreciate the feedback and concern that you express on this delicate matter! Just to have this documented and for visibility, allow me to share the Auth0 Knowledge Article that goes over all policies that affect our platform : Sanctioned Country Traffic Blocked by Auth0, essentially our equivalent to the Okta focused documentation that you shared.

While the decision to revert the sanctions is under discussion and we will forward your input accordingly, I can warmly recommend the following in order to create more awareness on the situation and if applicable, have the restrictions lifted for your specific use-case for minimal impact:

Thank you for reaching out to us and creating awareness over this sensitive information! If we can assist you with anything else, please feel free to reach out to us and we will gladly look into it.

Have a great one!
Gerald